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(54) Mail processing system with unique mailpiece authorization assigned in advance of 
mailpieces entering carrier service mail processing stream 



(57) A mailing list rs created including destination 
addresses for mailpieces to be submitted to a carrier 
service for delivery. A unique mailpiece identifier associ- 
ated with mailpieces (1 04) on the mailing list is generated 
by the earner or other trusted third party. The unique 
mailpiece identifier is printed on the mailpiece (104) with 
which it is associated, the mailpieces (104) with the 
printed unique identifier are submitted to the carrier serv- 
ice. The carrier service obtains the printed unique iden- 
tifier from the mailpiece. The obtained unique identifier 
from each said mailpiece is utilized to verify that data 
associated with the mailpiece has been processed by the 
carrier or trusted third party. When the unique number 
has been obtained from the mailpieces, the carrier serv- 
ice, if desired, may note this fact in the carrier records to 
prevent reuse of the unique identifier. The carrier service 
as part of issuing the unique identif cation may: charge 
the mailer's account of other fund depository for the car- 
rier service charges associated with the mailpiece; 
and/or, assign a destination delivery code; and/or, pro- 
vide address hygiene for the mailpiece; and/or change 
of address processing. When the unique iderttffier is 
obtained from the mailpiece, a delivery point destination 
code may be printed, on the mailpiece, based on the cor- 
rected address. As an alternative, the destination defiv- 
. ery cods may be provkf8d to the mailer with the unique 
mailpiece identifier to be printed on the mailpiece by the 
mailer. Various cryptographic . techniques may be 
employed to authenticate the mailer and tfie carrier serv- 
ice arid to protect the trartsmitted information between 
the parties. The payment for the carrier services can be 
implemented prior in lime to the entry of the mailpieces 



to the carrier service mailstream. Unauthorized mail- 
pieces may be out sorted early in the carrier service 
processing procedure 
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Description 

The present invention relates to mail processing sys- 
tems, and more particularly, to mail processing systems 
employing a unique mailpiece authorization for each 
mailpiece of a series of mail pieces. The authorization, 
such as a unique identifier, is assigned in advance of 
delivery of the mailpieces to the carrier service and is 
used by the earner service in processing the mail. 

In mail preparation, a mailer prepares a mailpiece 
or a series of mailpieces for delivery to a recipient by a 
carrier service such as the United States Postal Service 
or other postal service or a private carrier delivery serv- 
ice. The carrier services, upon receiving or accepting a 
mailpiece or a series of mailpieces from a mailer, proc- 
esses the mailpiece to prepare it for physical delivery to 
the recipient. Part of the carrier service processing 
includes reading the addresses on the mailpieces, sort- 
ing the mailpieces for delivery and determining that car- 
rier service charges have been paid by the mailer. 

Part of mail preparation has included rating and 
postage payment. Postage payment systems have been 
developed employing postage meters, which are mass 
produced devices for printing a defined unit value for gov- 
ernmental (such as tax stamps, or postage stamp) or pri- 
vate carrier delivery of parcels and envelopes. These 
postage meter systems involve both prepayment of 
postal charges by the mailer (prior to postage value 
. imprinting) and post payment of postal charges by the 
mailer (subsequent to postage value imprinting). Postal 
charges (or other terms referring to postal) as used 
herein should be understood to mean charges for either 
postal charges, tax charges, or private earner charges 
or the like (or postal service, tax service or private carrier 
service, as the case may be). 

Some of the varied types of postage metering sys- 
tems are shown, for example, in U.S. Patent No. 
3.978,457 for MICROCOMPUTERI2ED ELECTRONIC 
POSTAGE METER SYSTEM, issued August 31, 1976; 
U.S. Patent No. 4.301 .507 for ELECTRONIC POSTAGE 
METER HAVING PLURAL COMPUTING SYSTEMS, 
issued November 17. 1981; and U.S. Patent No. 
4.579,054 for STAND ALONE ELECTRONIC MAILING 
MACHINE, issued April 1, 1986. Moreover, other types 
of metering systems have been developed which involve 
different printing systems such as those employing ther- 
mal printers, ink jet printers, mechanical printers and 
other types of printing technologies. Examples of these 
other types of electronic postage meters are described 
in U.S. Patent No. 4,168,533 for MICROCOMPUTER 
MINIATURE POSTAGE METER, issued September 18, 
1979 and. U.S. Patent No. 4;493,252 for POSTAGE 
PRINTING APPARATUS HAVING A MOVABLE PRINT 
HEAD AND A PRINT DRUM, issued January 15. .1985. 
These systems enable the postage meter to print varia- 
ble irtformation. which may be alphanumeric and graphic 
type information. 

. Postage metering systems have also been devel- 
oped which emptoy encrypted information on a mail- 



piece. The postage value for a mailpiece may be 
encrypted together with other data to generate a digital 
token. A digital token is encrypted information that 
authenticates the information imprinted on a mailpiece 

s such as postage value. Examples of postage metering 
systems which generate and employ digital tokens are 
described in U.S. Patent No. 4,757,537 for SYSTEM 
FOR DETECTING UNACCOUNTED FOR PRINTING IN 
A VALUE PRINTING SYSTEM, issued July 12, 1988; 

w U.S. Patent No. 4.831,555 for SECURE POSTAGE 
APPLYING SYSTEM, issued May 15. 1989; U.S. Patent 
No. 4,775246 for SYSTEM FOR DETECTING UNAC- 
COUNTED FOR PRINTING IN A VALUE PRINTING 
SYSTEM, issued October 4. 1988; U.S. Patent No. 

is 4,873,645 for SECURE POSTAGE DISPENSING SYS- 
TEM issued October 10, 1989 and, US. Patent No. 
4.725,718for POSTAGE AND MAILING INFORMATION 
APPLYING SYSTEMS, issued February 16, 1988. 
These systems, which may utilize a device termed a 

20 Postage Evidencing Device (PED), employ an encryp- 
tion algorithm which is utilized to encrypt selected infor- 
mation to generate the digital token. The encryption of 
the information provides security to prevent altering of 
the printed information in a manner such that any change 

25 in a postal revenue block is detectable by appropriate 
verification procedures. 

Encryptibn systems have also been proposed where 
accounting for postage payment occurs.at a time subse- 
quent to tr« printing of postage. Systems of this type are 

30 disclosed in U.S. Patent No. 4,796.193 for POSTAGE 
PAYMENT SYSTEM FOR ACCOUNTING FOR POST- 
AGE PAYMENT OCCURS AT A TIME SUBSEQUENT 
TO THE PRINTING OF THE POSTAGE AND EMPLOY- 
ING A VISUAL MARKING IMPRINTED ON THE MAIL- 

35 PIECE TO SHOW THAT ACCOUNTING HAS 
OCCURRED, issued January 3, 1989. U.S. Patent No. 
5.293.319 for POSTAGE METERING SYSTEM, issued 
March 8, 1994; and, U.S. Patent No. 5,375,172, for 
POSTAGE PAYMENT SYSTEM EMPLOYING ENCRYP- 

40 TION TECHNIQUES AND ACCOUNTING FOR POST- 
AGE PAYMENT AT A TIME SUBSEQUENT TO THE 
PRINTING OF POSTAGE . issued December 20, 1994. 

Other postage payment systems have been devel- 
oped not employing encryptioa Such a system is 

45 described in U.S., Patent No. 5,319.562 for SYSTEM 
AND METHOD FOR PURCHASE AND APPLICATION 
OF POSTAGE USING PERSONAL COMPUTER This 
patent describes a system where end-user computers 
each include a modem for communicating with a com- 

50 puter at a postal authority. A secure nonvolatile memory 
for storing postage and remaining postage. The system 
is operated under control of a postage meter program 
which causes oorrtmuntcafions with the postal authority 
to purchase postage and for updating the contents of the 

55 secure nonvolatile memory. The postage printing pro- 
gram assigns a unique serial number to every printed 
envelope and label, where the unique senal riumber 
includes a meter identifier unique to 
. postage printing program of the user cfirectfy controls the 
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printer so as to prevent end users from printi ng more than 
one copy of any envelope or label with the same serial 
number. It is asserted in the patent that by capturing and 
storing the serial numbers on all mailpieces, and then 
periodically processing the information, the postal serv- 
ice can detect fraudulent duplication of envelopes or 
labels. In this system, funds are accounted for by and at 
the mailer site. The mailer creates and issues the unique 
serial number which is not submitted to the postal service 
prior to mail entering the postal service mail processing 
stream. Moreover, no assistance is provided to enhance 
the deJrverability of the mail beyond current existing sys- 
tems. 

Payment to a carrier service is securely protected 
due to the fact that the present invention provides for car- 
rier service authorization for mail prior to the actual mail 
deposit of the mailpieces into postal stream. Moreover, 
if desired, only mailpieces that were pre-paid or pre- 
approved are accepted at the time mailpieces are deliv- 
ered to and processed by the carrier service. Others 
mailpieces may be rejected during the processing step, 
as for example, by a bar code reader/sorter system or by 
other suitable equipment. Thus, the system provides lor 
a high level of payment security because mailpieces are 
prepaid or pre-approved or authorized by the carrier prior 
to deposit into the postal stream. 

In addition to the above, where desired appropriate 
security measures that are based on cryptographic tech- 
niques can be applied to provide protection against inter- 
cept of transmitted mailing lists, identification numbers 
and other data communicated between the mailer and 
the carrier service. This protects against, for example, 
the identification numbers for mailing list submitted by a 
mailer being intercepted by another mailer and used by 
the other mailer where the mailing list contains 
addresses desired by the other mailer. In such case, 
mailpieces with identical identification numbers could be 
submitted to the carrier service. In this case a dispute 
could arise as to which mailer has actually paid the post- 
age. Alternatively, it may require additional recordkeep- 
ing activity by the carrier service Any such attempt 
however, at this type of interception and impersonation 
is avoided by the cryptographic protection. 

Systems and methods embodying the present 
invention involve creating a mailing list including destina- 
tion addresses for mailpieces to be submitted to a carrier 
service for delivery. A unique mailpiece identifier associ- 
ated with mailpieces on the mailing list is generated by 
the carrier service. The unique mailpiece identifier is 
printed on the mailpiece with which it is associated. The 
mailpieces are submitted with the printed unique identi- 
fier to the carrier service. The carrier service obtains 
from the mailpiece the printed unique ktentffier. The 
obtained unique identifier from each said mailpiece is uti- 
lized to verify that data associated with the mailpiece has 
been processed by the carrier service. 

In accordance with afeaturebfthepreserrt invention 
when the unique identifier has been, obtained from the 



mailpieces, the carrier service may note this fact in the 
carrier records to prevent reuse of the unique identifier. 

In accordance with yet another feature of the present 
invention, the carrier service as part of issuing the unique 

5 identification may: charge the mailer's account or other 
fund depository for the carrier service charges associ- 
ated with the mailpiece; and/or, assign a destination 
delivery code; and/or, provide address hygiene for the 
mailpiece. The destination delivery code may be pro- 

10 vided to the mailer, if desired, for printing on the mail- 
piece or may be printed on the mailpiece by the carrier 
when processing the mail. Alternatively, the destination 
delivery code may be associated with the unique identi- 
fier and used to process the maO without printing the des- 

is ti nation delivery code on the mailpiece. 

Reference is now made to the following Figures 
wherein like reference numerals designate similar ele- 
ments in the various views, and in which: 
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FIGURE 1 is a block diagram of a mail processing 
system embodying the present invention and show- 
ing a mailer facility, a data center facility and a mail 
processing facility; 

FIGURE 2 is a mailing f He of data that is sent by the 
mailer's computer to the carrier service party data 
center; 

FIGURE 3 is a mail identification f fle of data that is 
sent by the carrier data center to the mailer's com- 
puter; 

FIGURE 4 is a mail processing file of data that is 
sent by the carrier data center computer to the mail 
processing equipment at the mail processing facility; 
FIGURE 5 is a flow chart of the operation at the 
mailer's facility in mail generation; 
FIGURE 6 is a mailpiece layout resulting from the 
mail process generation at the mailer's location and 
embodying aspects of the present invention; 
FIGURE 7 is a flow chart of the operation of the mail- 
ing list processing at the carrier data center; 
FIGURE 8 is a flow chart of the operation at the car- 
rier data center computer during the operation at the 
remote (or local) mail processing facility when mail 
is being processed; 

FIGURE 9 is a flow chart of the operation of the mail 
processing equipment at the mail processing facffity; 
and, 

FIGU RE 1 0 is a mailpiece layout after processing by 
the mail processing equipment and embodying fur- 
ther aspects of the present invention. 

Detailed Description of the Preferred Embodiment 



I. General Background 

55. A mailing Gst is created including destination 
addresses for mailpieces to be submitted to a carrier 
service for delivery. A unique maflpiece identifier associ- 
ated with mailpieces on the mailing list is generated by 
the carrier or other trusted third party. The unique maa- 
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piece identifier is printed on the maOpiece with which it 
is associated. The maflpieces are submitted with the 
printed unique identifier to the carrier service. The carrier 
service obtains from the maitpiece the printed unique 
identifier. The obtained unique identifier from each said 
maitpiece is utilized to verify that data associated with 
the maflpiece has been processed by the carrier or 
trusted third party. When the unique number has been 
obtained from the maflpieces, the carrier service, if 
desired, may note this fact in the carrier records to pre- 
vent reuse of the unique identifier. The carrier service as 
part of issuing the unique identification may: charge the 
mailer's account or other fund depository for the carrier 
service charges associated wfth the mailpiece; and/a. 
assign a destination delivery code; and/or, provides 
address hygiene for the mailpiece; and/or change of 
address processing. When the unique identifier is 
obtained from the mailpiece, a delivery point destination 
code may be printed on the mailpiece, based on the 
address hygiene address. As an alternative, the destina- 
tion delivery code may be provided to the mailer with the 
unique mailpiece identifier to be printed on the mailpiece 
by the mailer. Various cryptographic techniques may be 
employed to authenticate the mailer and the carrier serv- 
ice and to protect the transmitted information between 
the parties. The payment for the carrier services can be 
implemented prior in time to the entry of the maflpieces 
to the carrier service mail stream. Unauthorized mail- 
pieces may be out sorted early in the carrier Service 
processing procedure. 

It should be expressly noted, that the preferred 
embodiment employs assignment of unique identifica- 
tion numbers to mailpieces by the carrier. However, many 
advantages of the present invention can be achieved 
when the mailer assigns identification numbers and com- 
municates them together with mailing list to the carrier 
in advance of mail submission. 

If the mailer generates the unique identifiers, the car- 
rier service depends on the diligence of the mailer to 
send the unique identifiers before submitting the mail- 
pieces. The carrier service further must verify the 
uniqueness and the validity of the identifier and that pay- 
ments to the carrier by the mailer have been accounted 
for. 

It should be expressly recognized that a trusted third 
party can act as a representative for the carrier service 
where desired. The trusted third party can do alt or some 
of the functions provided by the carrier service. It should 
also be expressly noted that the term "carrier service" as 
used herein also means trusted third party, ft is intended 
to cover the carrier service alone, or the carrier service 
and/or the trusted third party or the trusted third party 
alone. AckJrtionally, a Ima^ece'asu^ toeinindudes 
letters and parcels which may have irrformation printed 
directly thereon or have information printed on a mailing 
tape or label adhered thereto. 



a. Authentication of the Mailer and of the Carrier 
Service 

Where desired, mailer's authentication can be 

5 achieved by employing a public key cryptosystem. In this 
case each mailer which become a subscriber to this 
service receives a private key. Protection of such private 
key is a responstbffity of the mailer. Such a private key 
has a corresponding unique public key which is stored 

io in a data base that is maintained by a provider of the 
service such as a carrier service or a post. These public 
keys can also be protected rf needed since only the car- 
rier service need know them, In practice, the carrier may 
issue to the user or mailer a portable storage device that 

is contains 500 brt-1 ,000 bit private key (e.g. a smart card). 
The user may employ a smart card reader operativety 
connected to a mail generating computer and capable of 
obtaining the private key from the portable storage 
device. In this case, encryption and decryption of the 

20 data is performed by the mail generating computer. 
Other arrangements are possible as well. For example, 
a user may employ a secure co-processor that securely 
stores the private key and executes all cryptographic 
transformations and communicates results to the mail 

25 generating computer. Similarly, the carrier may employ 
a private key securely stored in a tamper resistant secure 
co-processor. All rrailerc/subscribers have access to the 
corresponding carrier's public key. Mutual authentication 
between a mailer and the carrier can be arranged by 

30 using this public key cryptographic system. 

When a mailer initiates a communication session 
with the carrier over a public network, the carrier can 
send a unique number in plaintext to the mailer. The 
mailer then can encrypt the plaintext with the mailer's pri- 

35 vate key and send the resulting cipher text to the carrier. 
The carrier then decrypts the cipher text and compares 
the result with the initial plaintext If this comparison 
results in a match, it authenticates the mailer to the car- 
rier and also helps establish "rxxwepurJation'* feature if 

40 desired. That is, the mailer is authorizing the provider to 
deduct a certain amount of postage or funds from the 
mailer's account through appropriate credit or debit 
arrangements. Similarly, the carrier may send a pair of 
numbers (plain text and cipher text) that authenticate the 

45 carrier to mailer. This also establishes "non -repudiation" 
since the carrier thus acknowledges acceptance of cer- 
tain kind of data indicative of an upcoming mailing. 

b. Privacy of the Data Communicated Between the 
so Mailer and the Carrier Service 

It is desirable in some cases to protect the privacy 
of the data comnruricated between the mailer and the 
carrier. Specifically, mailing lists of customers or mailing 
55 financial data can be considered as confidential informa- 
tion and may even be strategically irnportant information. . 
ft thus should desirably be protected against such inter- 
ception. This can be arranged by art appropriate key 
exchange mechanism between the mailer and the pro- 
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vider. For example. Dfffte-HeOman or RCA key exchange 
(see standard X9.31-199x, Public Key Cryptocpaphy 
Using Reverstole Algorithms for the Financial Services 
Industry, Part 4. Transportation of Symmetric Algorithm 
Keys Using RSA). In this case, the mailer and the pro- 
vider establish a secret session key which both parties 
use to protect sensitive information. The mailer encrypts 
its mafling list with this secret key and the provider 
encrypts a list of unique identification numbers for 
addresses in the mailing list. This provides protection 
against an impersonation attack and the mailer gets an 
"electronic non repudiataWe receipt" for the mailing. This 
provided tangible evidence of the transaction in case of 
any dispute requiring proof of the transaction. Examples 
include certified, registered, insured and other special 
mail and delivery services, ft may also provide evidence 
in matters such as tax disputes regarding the mailer's 
expenses. 

c. Mall and Parcel Types 

All types and classes of mail, including but not lim- 
ited to parcel mail, overnight mail , flats and irregular par- 
cel pieces can be processed with the present system. 
Mail which is not machinable, i.e. that is not processable 
by bar code sorters and automatic flat sorters or other 
scanning/sorting equipment (e.g. parcels, large express 
mail envelopes and irregular parcel pieces], can be 
seamed for unique identification numbers wfth a hand 
held scanner or other suitable device. The processing 
throughput for such mail may be slower, however, the vol- 
umes are usually less than that for machinable mail. 

d. Postage Payment 

Postal accounting and/or payment is simplified and 
streamlined by paying or approving in advance (by the 
carrier service) mail to be put into the mail stream. This 
provides significant advantage in labor savings, admin- 
istrative expenses and accuracy. Presently, many exist- 
ing postal and carrier service accounting systems 
involve multiple, diversified payment systems, such as 
retail counters, permit mail, metered mail, etc. AD the 
accounting data has to be entered, often manually proc- 
essed, and reconciled at the end of every accounting 
period. The present system, due to is nature, allows all 
financial information to be computer processed, which is 
usually the fastest and most efficient way of handling 
such data. 

e. Operation of the System 

According to the present system each mailpiecehas 
a unique identifier such as an identification number 
assigned by the carrier service prior to preparation of the 
mailpieca Desirably the identifier is printed in a high 
readable for mat such as a robust bar code with an appro 1 
priate level of redundancy. This virtually guarantees, 
reading of even poorty printed mafl. However, since the 



present system is particularly suited to computer gener- 
ated mail, the print quality is expected to be high. This 
unique identifier can serve as a basis tor track and trace 
capability and for providing special services such as cer- 
5 trfied. insured or registered mail 

II. The Mailer 

Mailer's gain significant advantages from the present 
10 system. 

1) Less expensive service. The carrier service, if it 
so desires, will be able to pass its significant cost 
savings to mailers. This also includes flexible and 

is easily discountable rate structures. 

2) Higher reliability of service. The present system 
provides for a unique identifier on every mailpiece, 
thus making it more readily traceable and results in 

20 higher reliability. 

3) Mail prepared and processed according to the 
present system bypasses several processing steps 
and can have the highest possble address quality 

25 (including forwarding of chartge-of -address mail as 
explained below). Thus, mail delivery should be sig- 
nificantly faster. Knowledge by the carrier service of 
upcoming mail distribution prior to actual mail 
processing should allow for scheduling of process- 

30 ing equipment and transportation and should reduce 
delivery time. 

4) Special mail services integrated with regular mail 
generation can be especially important to mailers. 

35 This provides a significant advantage over el ectronic 
messaging. The present system allows, for example, 
for natural integration of certified, registered, 
insured, etc., mail into regular mail stream genera- 
tion and processing. This also reduces delivery time 

40 and expense. 

The present system has additional advantages with 
respect to forwarding change-of -address mail. Most of 
the carrier service existing process is a largely manual 

45 and very expensive operation with delays in the delivery 
of the mail. In the United States, at the present time a 
person or organization that has changed its address, 
files a change of address request with the local post 
office which is kept by the local post office. In the United 

so States this retention period is 1 8 months. The period of 
retention time varies in the other countries. The 18 
months period can be extended for up to one year. For- 
warding of first class mafl is done free of charge to mail- 
era The manual forwarding process works as W 

55 mail collected during the day for an old address is rela- 
beled with a semiautomatic machine run by an operator. 
Special labels with the new address is appfied to the 
. mailpiece beneath the old address. The mafl is sent back 
for further processing into mail processing facility such 
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as a General Mail Facility (GMF). The cost to the United 
States Postal Service of such operation is very high 
because of all the handling and processing involved. 

The present system overcomes the difficulty of for- 
warding change-of-address mail for all mail subject to 
conditions of the present system. Upon receiving a 
change-of-address notification from a recipient the car- 
rier service enters the new address into its computer. 
This data is automatically <x>mmurticated to carrier serv- 
ice data centers and is now from a mailer, the list is 
cleaned and hygienized. A Data Center linked with the 
old address. When the mailing fist for upcoming mail is 
received computer searches all addresses and assigns 
a new delivery point postal code (OPPC) such as an 1 1 
digit zip code for all change-of-address entries. The mail- 
piece identifier and delivery point postal code list that is 
available on line and in real time to mail processing 
equipment (e.g. bar code sorters) now has updated 
delivery information automatically. Thus, change-of- 
address mail never reaches the old, incorrect destina- 
tion, but is intercepted at a very early point in the mail 
processing cycle and reaches its correct destination ear- 
lier and at very little cost to the carrier service. New 
updated address irtformation can be provided to mailers 
(for a fee) if so desired by the carrier service making it 
an additional source of revenue for the carrier. 

III. Carrier System 

Many of the mailer benefits described above also benefit 
the carrier service. In addition, however, the present sys- 
tem eliminates the need for complex and costly accept- 
ance procedures. The mail is accounted and paid for 
automatically. Rate verification, however, remains desir- 
able since the charges for the mail are calculated based 
on the mailer submitted information (not the physical mail 
itself). Rate verification can be done automatically 
depending on relevant rating parameters. If these are 
weight and size, bar code sorter (or other suitable mail 
processing equipment) would have to be modified to 
measure weight and size of mailpieces. In this case the 
data fie available for on line real time inquiry by mail 
processing equipment would have an additional entry for 
each unique ID, namely postage paid. Verification may 
be employed using the principles described in the U.S. 
Patent No; 5,448,641. issued September 5, 1995 for 
POSTAL RATING SYSTEM WITH VERIFIABLE INTEG- 
RITY and assigned to Pitney Bowes Inc., the entire dis- 
closure of which is hereby incorporated by reference. 

The present system provides an opportunity, if 
desired, for rating mail based on the distance between 
origination and destination points. This can be important 
when a carrier service may desire to charge for the serv- 
ice based on the actual cost or value which may be a 
function of distance, rf required for a carrier service, this 
. rating approach prevents the so called "cream skimming" 
that offers low priced delivery in the most profitable . 
densely populated areas, avoiding remote and sparsely, 
populated areas. This distance rating or so called "zone 



based rating" can be done automatically without reading 
the destination address. Since the destination address 
list is submitted by the mailer, zone based charges are 
computed with great ease Also, any special discounts 
5 can easily be provided. 

The present system automatically enables the car- 
rier to collect very valuable information about upcoming 
mail volume and geographical distribution ahead of time 
and at no cost. This information is a by-product of the 

io present system and can serve to optimize mail flow and 
minimize cost 

The present system allows the carrier to avoid a 
costly and complex process of destination address read- 
ing. The existing transition in the mailer and carrier facil- 

is ity, typical for computer generated mail is: Address 
Electronic Data -» Address Print lmage->Address Elec- 
tronic Image -> Address Electronic Data; and it is com- 
pletely avoided. In the present system address data is 
never transformed from a printed image to the electronic 

20 domain such as an ASCII file. This eliminates costly 
transformations which can be a source of errors in 
processing mail. For mailers, this makes it posstte to 
print very personalized and stylized addresses (since 
they need not be scanned). It also makes it possible to 

25 use special multicolor graphics on envelopes for promo- 
tional or advertising mail. Since address information 
does not have to be scanned the imaging characteristics 
of the mailing envelope do not affect mail processing. 
There is typically at least several hours between the 

30 moment mail is printed by the mailer and the moment 
when mail is delivered to the carrier and mail processing 
begins. This time can be used to correct addresses, pro- 
duce and consolidate logistical information, arrange for 
special deliveries, etc. Since no real-time processing is 

35 required, less complex and costly computing equipment 
can be used. 

As an option address cleansing can be done on-line 
and in real-time. In this case all mail which is undefiver- 
able as addressed can be determined and correspond- 

40 ing data can be communicated back to the mailer. This 
benefit may be a significant option and can be offered to 
mailers for an additional tea Deliverable mail (even 
where the address is not fully complete and/or accurate) 
can be addressed correctly during the several available 

45 hours. Corrected addresses may also be sent to the 
mailer off-tine for incorporation in future mailings. The sit- 
uation with the preferred embodiment from the mailers 
point of view (off-line not real time cleansing) is no worse 
than the situation today. Mailers submit undeliverabie as 

so addressed mail and it is being processed until the deter- 
mination made that is undefiverable. The present sys- 
tem, however minimizes processing costs for 
undeGverafaie mafl. This mai can be intercepted by the 
mafl processing equipment at a very early stage in mail 

55 processing by the carrier service, providing significant 
advantage compared to the existing system. The length 
of time to immediately provide, a correct address fist to 
the mailer, if desired, depends on the size of the mating 
list involved, the size of the data base, the type of com- 
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puting equipment the load by other mailers on the sys- 
tem and the fike. 

There is no need tor the costly distribution of 
updated address data bases to the mailers and there is 
no need for intermediaries in this process. The most up 
to date information is automatically sent from local 
sources to the carrier service data center(s) where it is 
automatically incorporated and utilized in processing the 
mail. 

Moreover, with the present system mail can be 
deposited anywhere in me country without local deposit 
rule restrictions. For example, in the United States, the 
existing regulations require that mail metered by a mailer 
has to be deposited in the locality of the post office where 
the postage meter is registered. This is to help the postal 
service to reconcile meter usage and postage pur- 
chased. Comparable restrictions apply to permanent 
mailings. 

The present system additionally avoids address 
reading by postal processing equipment Instead it relies 
on unique maitpiece identifier that is unambiguously 
linked by the earner service to a destination delivery code 
for each address. Thus, problems associated with read- 
ing addresses from maitpieces are totally avoided. This 
is a major advantage to carrier services. It is also a great 
advantage to mailers since processing and delivery of 
the mail may be expedited. 

Digital signatures (which include cryptographic 
hashing) can be provided for files communicated 
between the earner service data center and mailer's 
computer. However, one cannot completely exclude the 
possibility that the maitpiece unique identifier and its 
associated address can fall out of synchronization, i.e. 
maitpiece identifiers would be printed on a maitpiece with 
the address different than was intended by the mailer. 
The present system overcomes this difficulty by includ- 
ing, if desired, the number of characters in the destina- 
tion address into mailpiece ID (except blanks and 
punctuation signs). Mail generating and processing 
equipment are able to determine a total number of char- 
acters in the address and compare it with the number of 
characters indicated in the mailpiece identifier thus pro- 
viding assurance that the synchronization is in order. 
Other mechanisms to assure synchronization between 
Mailpiece identifier and the destination address are pos- 
sible as well. One example would be to count the number 
of Ones in the address or using the first alpha numeric on 
each line of the destination address. For added assur- 
ance, OCR can be used to confirm that the printed 
address matches the address for which authorization 
has been granted 

IV. ORGANIZATION AND OPERATION OF THE SYS- 
TEM 

Reference is now made, to FIGURE 1. A mailer's 
computer 102 generates a mailing list of maitpieces 104 
to be created at a later point in time and to thereafter be 
submitted to a carrier service for defivery to an 
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addressee. The mailer's computer 102 is in communica- 
tion with the data center computer 106 of a carrier serv- 
ice or a trusted third party. The data center computer 106 
includes an address database and a mail identification 

5 database. The function of these databases wiD be 
described in greater detail hereinafter. The computer 
program which accesses the address database and the 
mail identification database is stored in a secure d ecssion 
storage location which may be part of the data center. A 

10 decision storage location is the hardware and software 
that is accessed by mail processing equipment to pro- 
vide address data and authorization. The data certer 
computer is in communication with the mail pressing 
facility equipment 108. This equipment includes a mail 

is feeder 1 10, an identification tag reader 1 12, a barcode 
printer 114. a barcode reader 116. and various sorter 
stackers shown generally at 1 18. 

In general operation, the mailer's computer 102 
transmits a mailing file shown generally at 1 20 to the data 

20 center computer 106. The data center computer 106 
generates a mailing identification f fle shown generally at 
122 after processing the mailing ffle 120. 

After receiving the mailing ffle 120 the mailpieces 
104 are prepared at the mailer or other facility using (he 

25 information from the mailing identification file which 
includes a unique identifier such as an identification 
number (ID tag) associated with each mailpiece which is 
printed thereon. The mailpieces 104 are then prepared 
and delivered to the carrier service for further process- 

30 ing. 

Reference is now made to FIGURE 2. The mailing 
file 1 20 includes the mailer account identification number 
202, a date 203 and a list of maitpieces to be prepared 
for various recipients shown generally at 204. The mail- 

35 ing list includes mailpieces numbered 1 through 357 
each going to a particular addressee or destination. 
Associated with each of the mailpieces is the postal rate 
206 and/or postal rating parameters 208 .The rate artdVor 
rating parameters are identified for each of the 

40 addresses on the mailing list. As is seen from mailingfBe 
120, the pieces shown include a one ounce regular size 
first class item for address 1 at $.32; a two ounce regular 
size first class for address 2 at $.57; and, a one ounce 
regular size third class for address 357 at $.19. The 

45 mailer's digital signature is also provided at 21 0. 

It should be understood, of course, that the form and 
format of the rating parameters and/or the rate for the 
carrier service vary depending upon the country and file 
carrier service involved and also, as for example, the 

so period of time involved. 

Reference is now made to FIGURE 3. Mailing iden- 
tification file 122 includes the mailer account number . 

302, the date of the mailing idenffiication fie shown at 

303, a list of addresses shown generally at 304, a unique 
as number 306 is associated with each address as wen as 

. the postage rate for the address shown at 308. A unique 
identification number 306 is associated with each of the 

. addresses 1 through 357 fisted in the mailing identifica- 
tion file 1 22. This unique identifier, here, an identificaion 
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rujnrber(orasmaDerportk)^ 

is the identif ication tag to be printed on the mailpiece. 
The unique identification number 306 is comprised, for 
example, of: the mailer's identification 31 0. the mailpiece 
count 31 2. the number of characters in the address 31 4 5 
(excluding spaces and punctuation marks) and an error 
correction code 31 6. Thus, for each mailpiece the Mow- 
ing information is printed: the address, the mailer identi- 
fication number 310, a sequential piece count number 
312, the number of characters in the adcfress 314. and w 
an error correction code 31 6. By using this data a unique 
identifier is thus associated with each and every address 
on the mailing identification file 122. The mailing identi- 
fication file further includes the total postage 318 
charged to the mailer as well as the digital signature 320 /5 
of the carrier or trusted third party. 

Reference is now made to FIGURE 4 which is the 
mail processing file shown generally at 124. The mail 
processing ffle 124 includes both an identification 
number 306 associated with each of the addresses 1 20 
through 357 and a delivery point postal code 402. The 
identification number 306 is the same as the identifica- 
tion number 306 in the mailing identification file 122. The 
delivery point postal code 402 however, is a new code 
generated by the carrier service as will be explained 25 
hereinafter. This is generated as a result of processing 
the mailing file 1 20 address list for each of the addresses 
in the mailing ffle. 

As an example, it should be noted that the ZIP code 
for address 1 on the mailing file 120 is 06484 and corre- 30 
sponds to the five digit ZIP code portion 404 of defivery 
postal code 402 for address 1 ; however, this is not the 
case with address 2. With respect to address 2, the ZIP 
code of 61277 on the mailing file 120 has been changed 
to a new five digit delivery ZIP code 406, specifically; to 35 
60677. This is a result of an address hygiene operation 
by the carrier service. The remaining portion of the deliv- 
ery postal code, as for example, for address 2 includes 
the four digit addon 408 and the last two digits of the 
street number 41 0. Thus, the postal delivery code, here 40 
one suitable for the United States, includes the five digit 
ZIP code 406, the four tigit add-on 408 and the last two 
digits of the addressee street range. Rom this informa- 
tion the carrier route and the carrier sequence can be 
computed, and if wished, included as part of the mail 45 
processing file 1 24. With respect to address 1 on the mail 
identification list the four digit add-on 41 2 is a post office 
box number and this is indicated by the street address 
range 00 at 414. 

It should be expressly recognized that other forms so 
of delivery point postal codes which are destination defiv- 
ery codes can be employed depencfing upon the carrier 
involved, the country involved and the system involved. 
In its broadest sense the destination delivery cod e ^des- 
tination address information which assists a carrier serv- 55 
ice in sorting and/or deliverying mailpiece. The factor of 
irrportance, however, isthat by using the maiBng file 120 
the carrier or trusted third party develops a defivery point 
postal code 402 for each address on the mailing fist that 



greatly facffitates processing and delivery of the mail. 
Where possible, the defivery point postal code should be 
suitable to uniquely identify every delivery address. 

Reference is now made to FIGURE 5. In generating 
the maitpieces 104, the mailer either retrieves or creates 
a mailing list at 502. Rating parameters and/or postage 
is determined for every mailpiece in the maifing list and 
appended to the mailing fist at 504. Communications is 
then established with the data center and the mutual 
authentication is performed with the data center at 506. 
The mailer and data center then exchange the mutual 
session secret key for data and privacy protection. The 
mailer digitally signs the mailing file and sends it to the 
data center at 510. Thereafter, the mailer receives the 
mailing identification f 3e from the data center at 51 2 and 
decrypts the mailing identification ffle at 514 using the 
secret key that was exchanged at 508. The number of 
characters from the mail idenffication file and from the 
maifing ffle are obtained for each address at 516 and 
compared at 51 8. If a match is not obtained, the process 
is stopped and a determination is made as to the cause 
of the mismatch at 520. If a match is obtained, however, 
the data is formatted and the mail is printed at 522. 
Thereafter, the mail is deposited into the postal stream 
at 524 by the mailer. 

Reference is now made to FIGURE 6. A mailpiece 
1 04a has printed on it a return address 602 and a deliv- 
ery address 604. Also printed on the mailpiece is the 
unique maifciece identifier, identification number 306, in 
a machine readable form, in human readable form or a 
combination thereof. Additional information may also be 
imprinted on the mailpiece such as the date as is shown 
at 606 and/or the postage amount at 608. 

Other information such as the rating parameters that 
went into rating the mail and graphics may also be 
imprinted on the mailpiece as well any special conditions 
or endorsements, such as certified mail, express mail, 
registered mail and the like. 

Reference is now made to FIGURE 7. The data 
center relives a request for service and provides mutual 
authentication with the mailer at 702. The secret session 
key is exchanged with the mailer at 704. The mailing list 
is received from the mailer and decrypted at 706 using 
the secret session key. Thereafter, the mailing identifica- 
tion file is generated by assigning unique identification 
numbers (ID tags), to each entry or address in the mail- 
ing list at 708. The total postage is computed and debited 
from the mailer's account at 710. This can involve off line 
credit authentication, funds transfer and/or a number of 
other f inancial processes associated with obtaining pay- 
ment or guaranteeing future payment for the carrier serv- 
ices rendered. The carrier service or trusted third party 
data enter then digitally signs and sends the mailing 
identification ffle to the mailer at 712. 

A number of the process steps described hereinafter 
can be done prior to sending the mail identification file 
to the mailer. However, to the extent it is desired to per- 
form this process off fine or to provide the service only - 
upon request and payment by the mailer, it can be per- 
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formed after or without being sent to the mailer when the 
mailing identification fQe is communicated. 

Accordingly, the data center performs address 
cleansing or hygiene on the mailing fist at 714. The 
search of change of address forwarding files is also con- s 
ducted at 716. This may involve a creation of a mail 
processing file by appending changed delivery point 
postal codes to the cleansed mailing list The information 
is stored as part of the mail processing fie in the decision 
storage of the carrier service data center computer. The 10 
Logistics Information FQe may also be generated and 
stored for access or communications to logistic control 
at 718 for logistic and load planning, 

Reference is now made to FIGURE 8. While the mail 
is being processed at the mail processing facility, the car- 75 
rier or trusted third party data center receives the mail- 
piece identification number and processing request from 
a mail processing equipment at 802. This initiates a 
search of the mailing identification file for the unique 
maitpiece identification at 804. Thereafter a determina- 20 
tion is made rf the unique mailing identification number 
is found at 806 and the process continues to determine 
whether the number was used before at 808. If, however, 
the unique identification number is not found, a reject 
message is sent to the mail processing equipment at 25 
810. At 808 if the unique identification number was not 
used before, the delivery point postal code is retrieved 
at 810. Additionally, if a forwarding change of address 
code is involved, it is also retrieved at 810. At this point 
in time a maitpiece flag is set or other indication for the 30 
unique identification code as being used at 81 2. If at 808 
the unique identification code was used before, a reject 
message is sent to the mail processing equipment at 
811. 

Finally, after the flag is set at 81 2, a confirmation of 35 
financial accounting information and/or account debiting 
is conducted at 814. At this point the carrier service and 
mailer may agree that the mail is deemed to have been 
processed and funds transfer can be implemented. 

Reference is now made to FIGURE 9. The mail 40 
processing equipment involves feeding the maitpiece, 
scanning and interpreting the maitpiece unique identifi- 
cation number at 902. The decision storage at the data 
center, and more particularly, the mail processing ffleis 
accessed at 904. A determination is then made at 906 45 
for reject messages. If no reject message is received, the 
delivery point postal code is retrieved at 908. If a reject 
message exists, the maitpiece is rejected at 910. 

If desired, for additional synchronization, a determi- 
nation may be made of the number of characters in the so 
address field to thereafter be compared to the number 
of characters in the maitpiece identification at 912. H a 
match is not found to exist, the mail may be rejected at 
916. If a match occurs, a confirmation on the maifpiece 
identification is sent to the data center at 91 8. The defiv- 55 
ery point postal code may thereafter be printed on the 
mailpiece at 920 and the primary sort and/or secondary 
sorts are conducted on the mailpiece at 922: It should 



be noted that a sorting action can be taken without 
imprinting the mailpiece. 

Reference is now made to FIGURE 10. All of the 
information from FIGURE 6 remains imprinted on the 
maitpiece; however, additionally imprinted on the mail- 
piece 104a is the delivery postal code associated with 
the particular maitpiece at 1002. 

WhBe the present invention has been disclosed and 
descrfced with reference to the disclosed embodiments 
thereof, it will be apparent, as noted above, that varia- 
tions and modrfcations may be made thereia As an 
example, under certain circumstances the delivery point 
postal code may be transmitted to the mailer along with 
the unique maflpiece identifier. As another example, 
communications between the mailer and the carrier 
service may be by way of hand delivery of computer stor- 
age devices (disks, tapes, etc.). It is, thus, intended in 
the following claims to cover each variation and modifi- 
cation that falls within the true spirit and scope of the 
present invention. 

Claims 

1 . A method for processing mail, comprising the steps 
of: 

creating a mafiing list including destination 
addresses for maitpieces (104) to be submitted to a 
carrier service for delivery; 

generating a unique mailpiece identifier (306) 
associated with each of the mailpieces (1 04) on said 
maffing list; 

printing each said unique mailpiece identifier 
(306) on the mailpiece with which it is associated; 

submitting the mailpieces (104) with the 
unique mailpiece identifier (306) printed thereon to 
* said carrier service; 

processing said maitpiece to obtain said 
unique mailpiece identifier (306), and, 

utilizing said obtained unique identifier from 
each said mailpiece to obtain a destination delivery 
code (402). 

2. The method of CLAIM 1 , wherein the step of gener- 
ating the unique mailpiece identifier is performed by 
the carrier service. 

3. The method of CLAIM 1 or 2. comprising the further 
step of: 

said carrier service d ebiting an account asso- 
ciated with the mailer for the carrier services to be 
rendered based on said mailing list 

4. The method of any preceding claim, comprising the 
. further step of: 

printing on said mailpiece the destination 
delivery coda 

5. The method of any preceding claim. a>rrpris(hg the . . 
further step of: 
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noting in said carrier service records when a 
unique mailpiece identifier has been obtained from 
a mailpiece to prevent reuse of the unique mailpiece 
identifier associated with said mailpiece, 

6. The method of any preceding daim, comprising the 
further step of: 

performing change of address search and 
replacement for the addresses on said mailing fist 
and generating said destination delivery code based 
on said replaced addresses, 

7. The method of any preceding daim, comprising the 
further step of: 

conducting address deansing of the address 
on said mailing list and generating said destination 
delivery code based on said deansed address of the 
addresses on said mailing list. 

8. The method of CLAIM 7, comprising the further step 

of: 

generating said destination delivery code 
based on said deansed and replaced address. 

9. The method of any preceding daim, comprising the 
further step of: 

generating synchronizing data for each 
address on said mailing list for use in determining 
synchronization between said unique mailpiece 
identifier associated with mailpieces on said mailing 
list and said destination delivery code assodated 
with mailpieces on said mailing list 



12. The system of CLAIM 10 or 11, wherein said means 
for generating said unique mailpiece identifier is 
controlled by the carrier service. 

13. A method for processing mail, comprising: 

creating a mailing list induding destination 
addresses for mailpieces (104) to be submitted to a 
carrier service for defivery; and, 

generating an authorization (306) associated 
with said mailpieces on said mailing list prior to said 
mailpieces entering said carrier service mail stream. 

14. A method for processing mail as defined in CLAIM 

13, comprising: 

printing said authorization on the mailpiece 
with which it is associated. 

15. A method for processing mail as defined in CLAIM 

14, comprising: 

submitting the mailpieces with the printed 
authorization to said carrier service; 

obtaining from said mailpiece said printed 
authorization; and, utilizing said obtained authoriza- 
tion from each said mailpiece to accept or reject said 
mailpiece for entering said carrier service mail- 
stream. 

16. A method for processing mail as defined in CLAIMS 
13, 14 or 15. wherein said carrier service generates 
said authorization associated with said mailpieces 
on said mailing list. 
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10. A system for processing mail comprising: 

means (1 02) for creating a mailing list indud- 35 
ing destination addresses for mailpieces (104) to be 
submitted to a earner service for delivery; 

means (106) for generating a unique mail- 
piece identifier (306) associated with each of the 
mailpieces on said mailing list; 40 

means (102) for printing each said unique 
mailpiece identifier (306) on the mailpiece with 
which it is associated; 

means for submitting the mailpieces with the 
printed unique mailpiece identifier to said carrier 45 
service; 

means (108) for obtaining from said mail- 
piece said printed unique mailpiece identifier (306); 
and 

means (1 08) for utilizing said obtained unique so 
mailpiece identifier from each said mailpiece to 
obtain a destination delivery code (402). 



11. The system of CLAIM 10, further comprising: 

means for debiting an account associated ss 
with the mailer for the carrier services to be rendered 
based on said mailing list 
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